Privacy Policy

Last updated: September 28, 2026

Image Processing

When you upload a photo for restoration, it is:

• Processed on our secure servers
• Sent to the third-party AI providers that run our image models, for processing
• Returned to your browser

We keep photos in private cloud storage in two cases:

• Free previews. When you see a watermarked preview, we keep the full-resolution result and your original so you can download it after you create an account or buy credits, without running the photo again.
• Your history. When you are signed in, your photos and results are saved to your account so you can download them again. You can delete them from your dashboard at any time.

We do not sell your images, and we share them only with the AI providers that process them. You can ask us to delete all of your data at any time.

Account Information

When you create an account (optional), we collect your email address, your name, and the account identifier supplied by the sign-in method you choose (for example, the Google account identifier when you sign in with Google). Authentication is handled by a self-hosted instance of Stack Auth, an open-source authentication system that we run on our own infrastructure. Your account details and sign-in sessions are stored in our own database on our own servers; no third-party authentication provider receives them. This data is used to manage your account, track usage limits, and process credit purchases.

Payment Information

Payment processing is handled by Dodo Payments. We never see or store your payment card details. We only receive confirmation of successful payments and credit purchase status.

Cookies & Analytics

We use cookies and similar technologies to improve your experience on PhotoFlip.

• Essential cookies: First-party cookies set by our self-hosted authentication service to keep you signed in, plus cookies required for core site functionality.
• Analytics: We use PostHog and OpenPanel, both self-hosted on our own infrastructure and both loaded from our own site code, to record page views, clicks, form interactions, heatmaps, and purchase flow measurement. These tools set cookies on your device unless you decline them in the cookie banner. Once you sign in, we attach your user ID to your analytics activity. We do not send your email address or name to these tools. Web addresses are stored without their query strings, except campaign tags such as utm_source.
• Session replay: PostHog records your activity on the page, including mouse movement, clicks, scrolling, and browser console output, and sends it to us as a video-like recording. Typed input is masked, your photos and results are blocked, and nothing is recorded on sign-in, password reset, account settings, or billing pages. Recording runs only for visitors who have not declined cookies. GlitchTip records and sends a second, separate replay of roughly one in ten sessions and of every session where an error occurs; those replays mask all on-page text and block all images and video.
• Error monitoring: We collect technical error data using GlitchTip, an open-source error tracker that we self-host on our own infrastructure. Uploaded photos are not included.
• Advertising: Unless you decline cookies, the Meta Pixel loads on every page and reports your visits and conversion events to Meta (Facebook). It sets a _fbp cookie and tracks you across sites, and Meta may use it to build an advertising profile and to show you ads for PhotoFlip elsewhere. Google Tag Manager separately injects our Google Ads conversion and remarketing tags, which store a click identifier (_gcl_ls) so a purchase can be attributed to an ad click.
• Live chat: Chatwoot, self-hosted on our own infrastructure, loads its widget on every page and sets a cw_conversation cookie.

We do not use your uploaded photos for analytics or session replay. If you decline the cookie banner, the Meta Pixel, Google Tag Manager, OpenPanel, and both session replays do not run, and PostHog counts visits and tool use without setting cookies. You can change your choice at any time with the Cookie settings link at the bottom of every page. We do not currently act on Do Not Track or Global Privacy Control signals. You can also block the cookies and scripts through your browser settings, or contact us and we will delete your data.

Third-Party Services

• AI processing providers: cloud services that run our image and video models
• Dodo Payments — Payment processing
• Google Tag Manager: injects our Google Ads conversion and remarketing tags
• Meta (Facebook): advertising pixel, tracks you across sites
• Cloudflare — Transactional emails

Authentication (Stack Auth), product analytics and session replay (PostHog and OpenPanel), error monitoring and error-session replay (GlitchTip), and live chat (Chatwoot) are not third parties: each is open-source software that we run on infrastructure we operate ourselves, so the data they handle stays on our servers and is not transmitted to an outside provider. The Meta Pixel is the exception among our measurement tags: it sends data to Meta, a third party we do not control.

Data Retention

Account data is retained as long as your account is active. You can request deletion of your account and all associated data by contacting us.

Contact

For privacy inquiries, contact us at our contact page.